plugins360 vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20244
3. 20251
4. 20268

Newest CVEs

• CVE-2026-109209

  All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPC

  plugins360 · All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

  Medium6.4
• CVE-2026-109974

  All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attribute

  plugins360 · All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

  Medium6.4
• CVE-2026-12123

  All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter

  plugins360 · All-in-One Video Gallery

  Medium6.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-1706

  All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter

  plugins360 · All-in-One Video Gallery

  Medium6.1
• CVE-2025-15516

  All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta Update

  plugins360 · All-in-One Video Gallery

  Medium4.3
• CVE-2025-14947

  All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

  plugins360 · All-in-One Video Gallery

  Medium6.5
• CVE-2025-12957

  All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass

  plugins360 · All-in-One Video Gallery

  High8.8
• CVE-2025-12966

  All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIP

  plugins360 · All-in-One Video Gallery

  High8.8
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3